Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass…
Priority CRITICAL 100Exploited in the wildCWE-306Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-306.
Summary
Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication.
Why it matters now
Exploitation Active In CISA KEV since 2021-12-01CISA due date 2021-12-15
EPSS 0.99825 99th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Active
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 65
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11005:*:*:*:*:*:* | 11.0 11005 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11006:*:*:*:*:*:* | 11.0 11006 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11007:*:*:*:*:*:* | 11.0 11007 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11008:*:*:*:*:*:* | 11.0 11008 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11009:*:*:*:*:*:* | 11.0 11009 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11010:*:*:*:*:*:* | 11.0 11010 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11011:*:*:*:*:*:* | 11.0 11011 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:-:*:*:*:*:*:* | 11.1 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11100:*:*:*:*:*:* | 11.1 11100 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11101:*:*:*:*:*:* | 11.1 11101 | Vulnerable | Zohocorp |
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11005:*:*:*:*:*:* Versions 11.0 11005 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11006:*:*:*:*:*:* Versions 11.0 11006 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11007:*:*:*:*:*:* Versions 11.0 11007 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11008:*:*:*:*:*:* Versions 11.0 11008 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11009:*:*:*:*:*:* Versions 11.0 11009 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11010:*:*:*:*:*:* Versions 11.0 11010 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11011:*:*:*:*:*:* Versions 11.0 11011 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:-:*:*:*:*:*:* Versions 11.1 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11100:*:*:*:*:*:* Versions 11.1 11100 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11101:*:*:*:*:*:* Versions 11.1 11101 Vulnerable ·Zohocorp
Show 55 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11102:*:*:*:*:*:* | 11.1 11102 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11103:*:*:*:*:*:* | 11.1 11103 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11104:*:*:*:*:*:* | 11.1 11104 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11105:*:*:*:*:*:* | 11.1 11105 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11106:*:*:*:*:*:* | 11.1 11106 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11107:*:*:*:*:*:* | 11.1 11107 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11108:*:*:*:*:*:* | 11.1 11108 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11109:*:*:*:*:*:* | 11.1 11109 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11110:*:*:*:*:*:* | 11.1 11110 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11111:*:*:*:*:*:* | 11.1 11111 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11112:*:*:*:*:*:* | 11.1 11112 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11113:*:*:*:*:*:* | 11.1 11113 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11114:*:*:*:*:*:* | 11.1 11114 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11115:*:*:*:*:*:* | 11.1 11115 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11116:*:*:*:*:*:* | 11.1 11116 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11117:*:*:*:*:*:* | 11.1 11117 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11118:*:*:*:*:*:* | 11.1 11118 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11119:*:*:*:*:*:* | 11.1 11119 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11120:*:*:*:*:*:* | 11.1 11120 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11121:*:*:*:*:*:* | 11.1 11121 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11122:*:*:*:*:*:* | 11.1 11122 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11123:*:*:*:*:*:* | 11.1 11123 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11124:*:*:*:*:*:* | 11.1 11124 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11125:*:*:*:*:*:* | 11.1 11125 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11126:*:*:*:*:*:* | 11.1 11126 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11127:*:*:*:*:*:* | 11.1 11127 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11128:*:*:*:*:*:* | 11.1 11128 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11129:*:*:*:*:*:* | 11.1 11129 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11130:*:*:*:*:*:* | 11.1 11130 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11131:*:*:*:*:*:* | 11.1 11131 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11132:*:*:*:*:*:* | 11.1 11132 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11133:*:*:*:*:*:* | 11.1 11133 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11134:*:*:*:*:*:* | 11.1 11134 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11135:*:*:*:*:*:* | 11.1 11135 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11136:*:*:*:*:*:* | 11.1 11136 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11137:*:*:*:*:*:* | 11.1 11137 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11138:*:*:*:*:*:* | 11.1 11138 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11139:*:*:*:*:*:* | 11.1 11139 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11140:*:*:*:*:*:* | 11.1 11140 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11141:*:*:*:*:*:* | 11.1 11141 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11142:*:*:*:*:*:* | 11.1 11142 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11143:*:*:*:*:*:* | 11.1 11143 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11144:*:*:*:*:*:* | 11.1 11144 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2:-:*:*:*:*:*:* | 11.2 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2:11200:*:*:*:*:*:* | 11.2 11200 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2:11201:*:*:*:*:*:* | 11.2 11201 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2:11202:*:*:*:*:*:* | 11.2 11202 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2:11203:*:*:*:*:*:* | 11.2 11203 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2:11204:*:*:*:*:*:* | 11.2 11204 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2:11205:*:*:*:*:*:* | 11.2 11205 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2:11206:*:*:*:*:*:* | 11.2 11206 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2:11207:*:*:*:*:*:* | 11.2 11207 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.3:-:*:*:*:*:*:* | 11.3 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.3:11300:*:*:*:*:*:* | 11.3 11300 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.3:11301:*:*:*:*:*:* | 11.3 11301 | Vulnerable | Zohocorp |
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11102:*:*:*:*:*:* Versions 11.1 11102 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11103:*:*:*:*:*:* Versions 11.1 11103 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11104:*:*:*:*:*:* Versions 11.1 11104 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11105:*:*:*:*:*:* Versions 11.1 11105 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11106:*:*:*:*:*:* Versions 11.1 11106 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11107:*:*:*:*:*:* Versions 11.1 11107 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11108:*:*:*:*:*:* Versions 11.1 11108 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11109:*:*:*:*:*:* Versions 11.1 11109 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11110:*:*:*:*:*:* Versions 11.1 11110 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11111:*:*:*:*:*:* Versions 11.1 11111 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11112:*:*:*:*:*:* Versions 11.1 11112 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11113:*:*:*:*:*:* Versions 11.1 11113 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11114:*:*:*:*:*:* Versions 11.1 11114 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11115:*:*:*:*:*:* Versions 11.1 11115 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11116:*:*:*:*:*:* Versions 11.1 11116 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11117:*:*:*:*:*:* Versions 11.1 11117 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11118:*:*:*:*:*:* Versions 11.1 11118 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11119:*:*:*:*:*:* Versions 11.1 11119 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11120:*:*:*:*:*:* Versions 11.1 11120 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11121:*:*:*:*:*:* Versions 11.1 11121 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11122:*:*:*:*:*:* Versions 11.1 11122 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11123:*:*:*:*:*:* Versions 11.1 11123 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11124:*:*:*:*:*:* Versions 11.1 11124 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11125:*:*:*:*:*:* Versions 11.1 11125 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11126:*:*:*:*:*:* Versions 11.1 11126 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11127:*:*:*:*:*:* Versions 11.1 11127 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11128:*:*:*:*:*:* Versions 11.1 11128 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11129:*:*:*:*:*:* Versions 11.1 11129 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11130:*:*:*:*:*:* Versions 11.1 11130 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11131:*:*:*:*:*:* Versions 11.1 11131 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11132:*:*:*:*:*:* Versions 11.1 11132 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11133:*:*:*:*:*:* Versions 11.1 11133 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11134:*:*:*:*:*:* Versions 11.1 11134 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11135:*:*:*:*:*:* Versions 11.1 11135 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11136:*:*:*:*:*:* Versions 11.1 11136 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11137:*:*:*:*:*:* Versions 11.1 11137 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11138:*:*:*:*:*:* Versions 11.1 11138 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11139:*:*:*:*:*:* Versions 11.1 11139 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11140:*:*:*:*:*:* Versions 11.1 11140 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11141:*:*:*:*:*:* Versions 11.1 11141 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11142:*:*:*:*:*:* Versions 11.1 11142 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11143:*:*:*:*:*:* Versions 11.1 11143 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11144:*:*:*:*:*:* Versions 11.1 11144 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2:-:*:*:*:*:*:* Versions 11.2 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2:11200:*:*:*:*:*:* Versions 11.2 11200 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2:11201:*:*:*:*:*:* Versions 11.2 11201 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2:11202:*:*:*:*:*:* Versions 11.2 11202 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2:11203:*:*:*:*:*:* Versions 11.2 11203 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2:11204:*:*:*:*:*:* Versions 11.2 11204 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2:11205:*:*:*:*:*:* Versions 11.2 11205 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2:11206:*:*:*:*:*:* Versions 11.2 11206 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2:11207:*:*:*:*:*:* Versions 11.2 11207 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.3:-:*:*:*:*:*:* Versions 11.3 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.3:11300:*:*:*:*:*:* Versions 11.3 11300 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.3:11301:*:*:*:*:*:* Versions 11.3 11301 Vulnerable ·Zohocorp
Remediation
No fixed version listed by the sources yet.
Timeline
- 2021-12-01 Added to CISA KEV
- 2026-10-02 Threatist record created from CVE-2021-37415
- 2026-10-03 Alias added: GHSA-wf6j-6x58-69fg
References
More Zoho vulnerabilities
- TI-2022-23765 Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003… KEVCVSS 3.1CRITICAL 9.8
- TI-2022-15981 Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable… KEVCVSS 3.1CRITICAL 9.8
- TI-2021-20117 Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to… KEVCVSS 3.1CRITICAL 9.8
- TI-2021-19808 Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and… KEVCVSS 3.1CRITICAL 9.8
- TI-2021-17574 Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API… KEVCVSS 3.1CRITICAL 9.8
- TI-2020-08210 Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2021-37415 · CVE Program
- CVE-2021-37415 · NVD
- CISA Known Exploited Vulnerabilities
- FIRST EPSS
- GHSA-wf6j-6x58-69fg · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences